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Let be an arbitrary stabilizer state distributed between three remote parties, such that each 
party holds several qubits. Let S be a stabilizer group of |^/}. We show that |$) can be converted 
by local unitaries into a collection of singlets, GHZ states, and local one-qubit states. The numbers 
of singlets and GHZs are determined by dimensions of certain subgroups of S. For an arbitrary 
number of parties m we find a formula for the maximal number of m-partite GHZ states that can be 
extracted from |\&} by local unitaries. A connection with earlier introduced measures of multipartite 
correlations is made. An example of an undecomposable four-party stabilizer state with more than 
one qubit per party is given. These results are derived from a general theoretical framework that 
allows one to study interconversion of multipartite stabilizer states by local Clifford group operators. 
As a simple application, we study three-party entanglement in two-dimensional lattice models that 
can be exactly solved by the stabilizer formalism. 
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I. INTRODUCTION 

Many quantum cryptographic protocols such as quan- 
tum key distribution [lj , coin flipping 2] , or other quan- 
tum games operate with a single copy of a pure quan- 
tum state shared by three or more parties. Each party 
has complete control of its subsystem, so the states which 
can be converted to each other by local unitary (LU) op- 
erators may be regarded as equivalent. Unfortunately, 
in general, LU-equivalence classes lack any known con- 
cise analytical description. For tripartite pure states (or, 
equivalently, bipartite mixed states), substantial progress 
has been achieved only for Gaussian states of fermions Q| 
and bosons [j| with some additional symmetry proper- 
ties. 

In the present paper we study LU-equivalence classes 
of stabilizer states. A stabilizer state of n qubits can be 
thought of as an irreducible representation of an abelian 
stabilizer group generated by n pairwise commuting oper- 
ators in the Pauli group (i.e., tensor products of the iden- 
tity I and the Pauli matrices a x , a v , a z ). Important ap- 
plications of stabilizer states include measurement-based 
schemes of quantum computation and quantum error 
correction using ancillas 0. They also provide exactly 
solvable models of condensed-matter systems jg . 

In the special case when each party holds exactly one 
qubit (so that a 'local' operator means a one-qubit op- 
erator), LU-equivalence classes of stabilizer states have 
been already studied by Van den Nest, Dehaene, and De 
Moor in [l|l(J[Il|. 

We assume that n qubits are distributed between a fi- 
nite set of parties M. Each party may hold an arbitrary 
number of qubits. Our main results are summarized be- 
low. 

Result 1: Three-party entanglement. 

We prove that an arbitrary stabilizer state shared by 
three parties A, B, C is LU-equivalent to a collection of 



states from a set E 3 = {|0), |*+), |*^)}, where 
= -^(|0,0> + |1,1», 

= -L(|o,o,o> + |i,i,i» (i) 

are the EPR state and the GHZ state. The set E% thus 
can be called an entanglement generating set (EGS) for 
three-party systems, as far as stabilizer states are con- 
cerned. LU-equivalence classes are completely specified 
by four integers (a,b,c,p), where a, 6, c are the numbers 
of EPR states |*+) shared by BC, AC, and AB respec- 
tively, while p is the number of GHZ states l^jj") shared 
by all three parties. A prerequisite to this result is the 
work where a set E<x — {|0), | V I' + )} was shown to be 
an EGS for bipartite systems. It should be emphasized 
that the set E3 is not an EGS for arbitrary tripartite 
states, even if one allows arbitrary local manipulation 
and classical communication (see |l3j). 

Result 2: Multipartite entanglement. 
Let |\E') be an n-qubit stabilizer state shared by a set 
of parties M, \M\ = m > 3, and let 5 be its stabilizer 
group. We are interested in the maximal number of m- 
party GHZ states 



|*+> = -^(|0®"»> 



1* 



that can be extracted from |>I') by local unitaries. Denote 
this number by p. We prove that 



p = dim(5) - dim(Sioc), 



(2) 



where Si oc is a subgroup of S generated by all stabilizer 
operators that act trivially on at least one party. (For 
bipartite systems the answer is slightly different, p = 
(l/2)(dim(5) - dim(5 ioc )), see 0.) 
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In particular, p can be computed in polynomial time 
in the number of qubits. Interestingly, we will give below 
a constructive proof of Eq. (J5J), which translates natu- 
rally into an efficient algorithm to perform the GHZ ex- 
traction. An implementation of this algorithm will be 
available online soon. 

It should be mentioned that Eq. J5J) provides a simple 
upper bound on p. Indeed, if one can find I independent 
generators of S, such that each of them acts trivially 
on at least one party, then dim(5; oc ) > I and thus p < 
dim(S) - I. 

Also, we show that the GHZ extraction yield p, con- 
sidered as a functional of coincides with an entan- 
glement measure introduced by Linden, Popescu, and 
Wootters in to quantify irreducible multipartite cor- 
relations. 

To illustrate the usefulness of Results 1,2, we consider 
two-dimensional lattice models that can be exactly solved 
by the stabilizer formalism. Well-known examples of such 
models include the cluster state used in one-way quan- 
tum computation [(| and Kitaev's toric code state |5ll7|. 
In general, the ground state of such models can be spec- 
ified as an eigenvector of local stabilizer operators. We 
study tripartite entanglement of the ground state with 
respect to a partition of the lattice into three angular 
segments with a common junction point (see Figure 1 in 
Section IVII|I . We show that the number of GHZ states 
extractable from the ground state is bounded from above 
by a constant that depends only upon the structure of 
stabilizers near the junction point (and does not depend 
upon the size of the lattice) . This is a natural generaliza- 
tion of the entanglement saturation phenomenon found 
for ID spin chains (see |16| and references therein). 

The rest of the paper is organized as follows. SectionlTTI 
introduces notation and terminology. Our main techni- 
cal theorems are proved in Section ITTT1 In Section Hvl we 
consider multipartite stabilizer states and prove Eq. J2J. 
Section establishes a connection between GHZ extrac- 
tion yield and measures of multipartite correlations. LU- 
equivalence classes of tripartite states are discussed in 
Section IVT1 We apply the developed technique to spin 
lattices in Section IVIII The goal of Section IVIIII is to 
convince the reader that four-party stabilizer states are 
likely to lack a simple entanglement generating set. 



II. PRELIMINARIES AND NOTATION 
A. Stabilizer states 

The goal of this section is to introduce convenient ter- 
minology. Whenever it is possible, we use the notation 
of the textbook [lj}, Chapter 15. 

The Pauli operators a x , a y , cr 2 , and the identity op- 
erator / will be labeled by elements of two-dimensional 
binary linear space G = {00, 01, 10, 11}, such that 

&oo = I, o- w —a x , cF i=a z , an—a y . 



For any integer n and / = (ax, Pi, . . . , a n ,P n ) £ G n , 
define a a -operator 

O-(f) = CTci/Ji ® • • • ® (7 a „0 n - 

For all /, g £ G™, one has a(f)a(g) = e a(f+g) for some 
phase factor e l6 . The commutation rules for cr-operators 
can be written as 

a(f)a(g) = (-1)^ a(g)a(f). 

Here uj : G n <E> G n —> {0, 1} is a symplectic form, 

n 
3=1 

For any subspace S C G n define a dual subspace S as 

g± = { f e Qn . w(/) g) = for aU g £ 

A subspace S is called isotropic iff S C S , i.e., ui(f, g) = 
for any f,g G S. A subspace S is called self-dual iff 
S 1 - = S. For any isotropic (self-dual) subspace S C G n 
one has dim(5) < n (dim(5) = n). 

The Hilbert space of n qubits will be denoted B n . A 
unitary operator U : B n — * B n belongs to the Clifford 
group, U £ Cl(n), iff it maps cr-operators to cr-operators 
(up to a sign) under the conjugation. In other words, 
U G Cl(n) iff there exists a map u : G n — > G n and a 
function e : G" — > { + 1, — 1}, such that 

Ua{f)U^ =e{f)a{u{f)) (3) 

for any / G G™ . Unitarity of U implies that u is a linear 
invertible map preserving the inner product ui, i.e., 

v(f,9) = v(u(f),u(g)) 

for all f,g£ G n . Such linear maps constitute a binary 
symplectic group Sp2(n). In fact, all u £ Sp2{n) can be 
realized through an appropriate choice of U £ Cl(n). 

A stabilizer state G B n is an irreducible represen- 
tation of a group {e(/)cr(/) : / G S}, where S C G™ is 
a self-dual subspace and e : S — ► {+1, — 1} is a function 
that accounts a phase in a product of cr-operators. In 
other words, 

<r(f) I*) = </) /e5. (4) 

The state |^) is uniquely specified by Eq. JIJ. The sub- 
space S is refered to as a stabilizer group of |^). Two 
stabilizer states have the same stabilizer group iff they 
can be mapped to each other by a cr-operator, see |15| . 
Any stabilizer state can be represented as = U 10®") 
for some operator U £ Cl(n). 

B. Local Clifford equivalence 

A state |\&) G B n is called M-partite iff the n qubits 
are distributed between a finite set of parties M, i.e., 

n = ^2 n a , n a > 0. (5) 
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We shall be interested in equivalence classes (orbits) of 
stabilizer states under local Clifford unitary (LCU) op- 
erators. 

Definition 1 M-partite stabilizer states G B n 

are called LCU- equivalent iff there exist Clifford unitaries 
{U a G Cl(n a )}aeM such that 

aeM 

For any vector / G G n and party a denote by f a G G™° 
a projection of / onto the party a (if one regards / as a 
binary string, f a is a substring that includes all qubits 
owned by a party a). In particular, f a = iff o~(f) acts 
trivially on the party a. 

Definition 2 Suppose n qubits are distributed among a 
set of parties M. Let S C G n be a linear subspace. For 
each a € M define a local subspace S a C S and a co-local 
subspace S a C S as 

S a = {geS : g p = for all (3 G M\a}, 

and 

S& = {g € S : g a = 0}. 

In other words, / G S a iff cr(f) acts as the identity on the 
party a; f G S a iff cr(/) acts as the identity on all parties 
(3 =/= a. In the case n a = we shall use a convention 
5 Q = and Sa — S. If S 1 is a stabilizer group of some 
state, we shall use the terms local (co-local) subspace and 
local (co-local) subgroup interchangeably. 

Consider an M-party stabilizer state Let p a be the 
reduced state of the party a. To simplify the discussion 
we shall assume that Rk( j o Q ) = 2 n " for all a G M, that 
is, that all states under consideration have the maximal 
possible local ranks. Let 5 be a stabilizer group of 
One can easily check that the requirement Rk(p Q ) = 2" Q 
is equivalent to the local subgroup S a being trivial. 

Definition 3 An M-party stabilizer state |W) with a sta- 
bilizer group S has full local ranks iff all local subgroups 
of S are trivial: 

S a = for all a G M . 

In general case, if Kk(p a ) = 2 fe , one has dim(S a ) = n a — 
k. Equivalcntly, n a — k copies of the one-qubit state 
|0) can be extracted from for each a G M by local 
Clifford unitaries (this will follow from Theorem [21 with 
S' = S a ). After such local extractions we arrive at a 
state with full local ranks. A necessary and sufficient 
criterion for LCU-equivalence is given below. 

Theorem 1 Let I*),!*') G B n be M-party stabilizer 
states with full local ranks. Let S, S' C G n be their stabi- 
lizer groups. The state is LCU- equivalent to iff 
there exists a linear invertible map T : S — > S' such that 

u(T(f) a ,T(g) a ) = uj(f a ,g a ) for all f, g G S, a G M. 

We shall prove Theorem \T\'m the next Section. 



III. LOCAL EXTRACTION 

Let |*) G B n be an M-party stabilizer state. The 
most interesting stabilizer states are LCU -irreducible 
ones (which in this paper we simply refer to as irre- 
ducible), which are not LCU- equivalent to a collection 
of stabilizer states of smaller dimension. For example, if 
one considers the finest partition, M — {1,2, ... ,n}, a 
state is irreducible iff it is entangled with respect to 
any bi-partition. On the other hand, we shall see that for 
bipartite and tripartite systems (\M\ = 2 or \M\ = 3), 
the only irreducible states are the EPR and GHZ states. 
If is not irreducible, one can extract some simpler 
stabilizer state from it by LCU operators. Given two 
M -party states \ty) and |$'), one can ask under what 
circumstances |^') is extractable from |^). The goal of 
this section is to answer this question. Note that LCU- 
equivalence of states is just a special case of extraction, 
when 1^') and |\&) are composed from the same number 
of qubits. 

Definition 4 Let |*) G B n and |*') G B k be M-party 
stabilizer states, such that 

n = n a , k = k a , < k a < n a . 

aeM aeM 

The state |*') is extractable from |\p) iff is LCU- 
equivalent to | "I^ <g) \E'") for some M-party stabilizer state 
|*"). 

Remark: An equality k a — means that the party a 
owns no qubits of the state |^'). Analogously, k a = n a 
implies that the party a owns no qubits of the state \^"}. 

A necessary and sufficient criterion for a state l^') to 
be extractable from |^) is given below. 

Theorem 2 Let |*) G B n and |*') G B k be M-party 
stabilizer states with stabilizer groups S C G n and S' C 
G k . The state \ty') is extractable from |^) iff there exists 
a linear injective map T : S' — » S such that 

(i) w(T(f) a ,T(g) a ) = uj(f a ,g a ) for all f,g G S' and 
a G M; 

(ii) (T ■ S% = T • (S' & ) for all a G M. 

This theorem is a simple consequence of the following 
lemma. 

Lemma 1 Suppose n qubits are distributed among a set 
of parties M . Let S, S' C G n be linear subspaces. The 
following statements are equivalent: 

1. There exist local operators {u a G Sp2(n a )} ae M 
such that 




2. There exists a linear invertible map T : S — > S' 
such that 
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(i) u(T(f) a ,T(g) a ) = U)(f a ,g a ) for all f,g g S 
and a G M ; 

(li) T-S & = S' & for all a £ M. 

Here the direct sum © Qg M M <* corresponds to a de- 
composition of G n into its local subspaces, i.e., G" — 
aeM G". A proof of the lemma is presented in the 
Appendix. 

Proof of Theorem |5J The non-trivial part is to prove 
that existence of T with the properties (i), (ii) implies 
that \^>') is extractable from |\&). Let us split the n a 
qubits owned by the party a £ M into two subsets 

{1,2,..., no,} = A a [jB a , 

such that \A a \ — k a . We shall refer to a qubit as an 
^4-qubit (£?-qubit) if it belongs to one of the subsets A a 
(B a ). Any vector / £ G n can be represented as a direct 
sum / = /a © /si where Ja and fs are projections of / 
onto A-qubits and -B-qubits respectively. 

Let us define a linear subspace R 1 C G n that is equal 
to a direct sum of S' on A-qubits and the zero space on 
£?-qubits, i.e., 

R' = {fe G n : f B = and f A g S'}. 

Define also a subspace R = T ■ S 1 C S , i.e., 

R = {f EG n : f = T(g) for some g g S'}. (6) 

The map T regarded as a map from R' to R obviously 
satisfies condition 2 of Lemma^ We conclude that there 
exists a linear symplectic operator u : G n — > G™ such 
that 

R' = u ■ R, u = u Q , (7) 

aEM 

where m q g Sp2{n a ). 

Consider a linear subspace 

Q = u • S C G™. (8) 

The fact that u g Sp2{n) implies that Q is self-dual. Let 
|$) g B n be a stabilizer state with the stabilizer group 
Q. (|$) is unique up to multiplication by a er-operator.) 
Since u is a direct sum of local symplectic operators, |$) 
is LCU-equivalent to |^). 

We still must show that |$) is a tensor product of two 
stabilizer states, |$) = \$>a <S> that live on the A- 

qubits and -B-qubits respectively. Indeed, since R is a 
subgroup of S, it follows from Eqs. I|7I8|I that 

R' C Q. 

Thus the state |$) satisfies stabilizer equations 

a(/)|$)= £ (/)|$), /gi?', (9) 

for some function e : R' — > {+1, — 1}. By the definition 
of i?', any operator cr(/), / g R 1 acts trivially on B- 
qubits. If we restrict our attention to A-qubits only, R' 



is a self-dual subspace (since R = S'). Thus the stabilizer 
equations Eq. JSJ completely specify the state of the A- 
qubits (see the remarks following Eq. QJ). Denote this 
state \$a)- Since the states and 1^') have the same 
stabilizer group, they coincide up to a er-operator. Thus 
|$) is LCU-equivalent to |$' ® $b) for some stabilizer 
state |$b). On the other hand |$) is LCU-equivalent to 
l^). We have proved that I*') is extractable from \^). 

Conversely, suppose |^) is LCU-equivalent to |\&' ® 
*">. This means that S = u ■ (5' 5"), where S" is a 
self-dual subspace, u = Q) aeM u a is a local symplectic 
operator, and the direct sum S' © S" corresponds to the 
bi-partition of all qubits in the state | W ® . One can 
easily check that a map 

r(/) = u-(/eo) 

from 5" to S satisfies conditions (i) and (ii) . The theorem 
is proved. 

□ 

Remark: Condition (ii) in Theorem|21cannot be dropped. 
Indeed, consider as an example three-party states, M = 
{A, B, C}. Let |*) = |*+) be the GHZ state and 
|*') = |*+) be the EPR state shared by A and B. Obvi- 
ously, | 'J') cannot be extracted from \^>) without classical 
communication. However, the linear injective map T sat- 
isfying condition (i) exists. Indeed, consider a mapping 

a x ®a x -> a x <g> a x <g> a x , 

between stabilizer generators of \^>') and |^). It can be 
easily converted to a map T : S' — > S between the sta- 
bilizer groups. This map preserves local commutation 
rules, so condition (i) is satisfied. 

Proof of Theorem ^ Consider a special case of The- 
orem |21 with k a = n a for all a g M, i.e., with the state 
\^>") being a complex number. In this case S,S' C G™ 
are self-dual subspaces, so that dim(S') = dim(S") = n. 
Thus T is a linear invertible map and T ■ S' — S. On the 
other hand, the statement u \$!') is extractable from \^)" 
translates into u \^>'} is LCU-equivalent to I 1 ?)". What 
we obtain is exactly Theorem ^ with T replaced by 
and with the extra condition (ii). We will show now that 
(ii) can be derived from (i), the equality T ■ S' — S, and 
the maximal local rank assumption. 

Indeed, consider some particular a and take any vector 
/ g S' & , so f a = 0. Denote h = T(f) g S. Condition (i) 
tells us that 

uj{h a ,g a ) = u(f a , (r _1 (g)) Q ) = for any g g S. 

Consider a vector h g G™ such that h a — h a . Then 
u)(h, g) = for any g g S, that is h g S x . Since S ± = S 
we have h £ S f]G^ = S a = 0. We conclude that h a = 0, 
that is /i S Sa- This proves that 
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Applying the same arguments to the map T 1 : S — > S' 
(which, of course, also satisfies condition (i)) one gets 

T ■ S a C S a . 

Therefore S' & and S& have the same dimension, and thus 
T ■ S ( - x = S a . 

□ 

Remark: In fact, a little bit more work shows that the 
full local ranks assumption in Theorem^can be dropped. 
We sacrifice some generality for the sake of readability. 

IV. GHZ-EXTRACTION FORMULA 

Given a set of parties M, \M\ = m, consider an M- 
party analogue of the GHZ state 

It is a stabilizer state with a stabilizer group generated 
by a vector / £ G rn such that 

a(f) =a*®of® ■••»<„, (10) 

and vectors {f a p £ £? m } a>l g e M such that 

<r{i a p) = a* a ®a% (11) 

(the identity factors are suppressed). The vectors /, f a p 
constitute an overcomplete basis of the stabilizer group. 

Given an M-party stabilizer state £ B n , one can 
ask how many copies of 14^) can be extracted from |4*) 
by local Clifford unitaries. The goal of this section is 
to answer this question. Let S be a stabilizer group of 
I*}, and Sa C S, a £ M, be its co- local subgroups (see 
Definition 0) . Define a subgroup 

Sioc = ^ S a (12) 

generated by all co-local subgroups. The sum above is 
generally not a direct one, since the co-local subgroups 
may overlap. By definition, Si oc C S, and, in general, 
Sioc C S. In the latter case one has a deficit of local 
stabilizer elements, meaning that for any choice of a basis 
in S there will be at least n — dim(S'; oc ) basis vectors 
having support on all m parties a £ M. We will see that 
each of these non-local basis vectors can be identified 
with the / element of the stabilizer of a state l 1 ?^) ( see 
Eq. JTSJ). 

It was pointed out in the paper [l2] that a functional 

A(tf ) = n - dim(£ Ioc ) = dim(S) - dim(5 Joc ) (13) 

can be used as an entanglement measure that quantifies 
truly multipartite correlations in In the present pa- 
per we go further and prove the following theorem. 



Theorem 3 Let |W) £ B n be an M-party stabilizer state 
with a stabilizer group S. Suppose that m = \M\ > 3. 
The maximal number of states |\&+ ) extractable from \^f) 
by local Clifford unitaries is equal to A(W). 

Remarks: (1) Note that the functional A(\P) is invariant 
under extraction of local |0) states. Thus we can safely 
assume that |\&) has full local ranks. (2) The generaliza- 
tion of the theorem to arbitrary LU operators is discussed 
m Section |V| 

Proof: For each a £ M define a subspace C a £ G n as 

C a = {/ £ Gl : cu(f, g) = for all g £ Si oc }- 

Here G™ is the local subspace of G n corresponding to the 
party a (see Definition 0) . To illustrate the usefulness 
of this definition, consider as an example \^) = 1^+). 
Then the subgroup Si oc is generated by vectors {fap} 
(see Eq. ijTTj) '). while C a is a one-dimensional subspace 
generated by o~ a . The remaining stabilizer generator of 
the GHZ state / anticommutes with a z a for any a £ M. 
Thus any product cr z a ® crS commutes with both / and 
stabilizer elements from Si oc - Therefore, o~ a (E> is in 
the stabilizer of \^>). Similarly, in the general case, we 
shall use the subspaces C a to construct 2-local stabilizer 
elements of | "f) that are analogous to a a ® stabilizer 
elements of the GHZ state. 
Our first goal is to prove that 

dim(£ Q ) = A(#) for any a £ M. (14) 

Choose an arbitrary subgroup S en t C S such that 

S = Sloe ffi S en t ■ (15) 

By definition of Si oc , any non-zero vector / £ S en t has 
support on all parties, i.e., f a y^0 for all a £ M. Define 
a bilinear form 

T] a : C a <g> S en t ~> {0, 1}, Va(f,9)=^(fct,9ct)- 

We claim that the form r\ a is non-singular, that is 

VM,9) = for all g £ S en t iff / = 0, (16) 

and 

VM,9) = for all f £ C a iff g = 0. (17) 

Indeed, suppose / £ C a and uj{f,g) = for all g £ S en t- 
By definition of C a , we have u)(f, g) = for all g £ Si oc . 
Thus the decomposition Eq. (|15fl implies that / £ S . 
But since S = S, one has f £ S. Since the state \$f) 
has full local ranks (see the remark after the theorem), 
^ofl^C^^O, that is / = 0. The property Eq. © 
is proved. 

Suppose g £ S en t and u)(f,g) = for all / £ C a (for 
some particular a £ M), that is g £ C^. The definition 
of C a implies that 

g £ iff g a = ha for some h £ Si oc . 
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(Here we use the fact that (C^) 1 - = C for any binary 
subspace C.) Thus there exists a vector h £ Si oc such 
that (h + g) a = 0, i.e. h + g £ <S/ c- But this means that 
9 £ S'loc. Since decomposition Eq. 1)15(1 is a direct sum, 
the inclusion g £ S en t H Si oc implies 5 = 0. The property 
Eq. (23) is proved. 

The fact that ry Q is non-singular implies that the sub- 
spaces C a and S ent have the same dimension. But from 
Eq. JTBJ we infer that dim(S ent ) = A(*). The formula 
Eq. is proved. 

Denote p = A(\l/) and choose an arbitrary basis 
gx , g~2> ■ ■ • j Qp in the subspace S en t . For each a £ M 
choose the dual basis g a ii9a2i ■ ■ ■ -,9ap in the subspace 
£ Q with respect to the form rj a . That is, the set of vec- 
tors {g a j}j must satisfy equations 

Va{g a j,g~k) = Sjk for all l<j,k<p and a £ M. 

(18) 

Define vectors g a pj £ G n by 

9aPj =9aj+9/3j, 3 = 1, 

It follows from Eq. (QSJ that 

u(g a pj,g~k) = ria(gaj,gk) + vp{gi3j-,gk) = S ]k + 5 ]k = 0. 

Thus g a /3j S S^j. On the other hand, by definition of 
the subspaces £ a , one has C a C 5^ c for all a £ M, that 
is <7 a £j € 5 Z ^ C . We infer from Eq. (fTSf) that £ S ± . 
Since S is self-dual, we conclude that g a /3j £ S. 

All arguments above apply equally well to m — 2 and 
to > 3. From now on we shall focus on the case m > 3. 

We would like to show that the subspaces C a are 
isotropic, i.e., 

u)(f,g) = for all f,g£C a , a £ M. (19) 

Indeed, it suffices to show that uj{g a j, g a k) = for any 
j, k. Assuming that m > 3, choose an arbitrary triple 
a,/3,7 £ M, such that a ^ (3 ^ 7. Taking into account 
that 5 Q /3j € 5, g a - (k £ S, we obtain that 

= ^(ga/3j,g a -( k ) = u{g a j,g a k)- 

The property Eq. I|19|l is proved. 

By definition, a vector g a pj has a support only on two 
parties. If to > 3 it means that 

g a pj £ Sioc (20) 

for all pairs of parties a, (3 £ M and j — 1, . . . ,p. 

Our next goal is to adjust the subspace S e nt to make it 
"locally isotropic", i.e., to fulfill the following property: 

u(fa,9a) = Q for all f,g£S enU a £ M. 

This adjustment can be achieved by adding a proper "lo- 
cal shift" taken from the subspaces C a . Namely, the basis 
vectors g~j £ S en t must be replaced by new basis vectors 
according to 

i-i 

9j 9j + r i< 5a/, 3 = 1, • • • ,P, (21) 

a£M 1=1 



where 

Tji = (ffi)a)- 

One can easily check that after this replacement we end 
up with 

w((<7j)a, iSk)a) = 

for all a £ M and all j, k. In addition, the fact that S en t 
is an isotropic subspace, i.e., oj(g~j,gk) = 0, implies that 

aeM 

for any fixed j, I. This means that the vector added to 
cjj in Eq. I|21|) belongs to the stabilizer group S. Accord- 
ingly, the adjusted S ent is still a subspace of S. Moreover, 
Eq. (|20|l implies that the added vector belongs to Si oc , so 
the decomposition S = Si oc © S en t remains a direct sum. 

Summarizing, after the adjustment described above we 
can assume that 

U(g a j,9ak) = 0, U((g~j)a, (Sk)a) = 0, Uj{g a j,9k) = Sjk, 

. (22) 

for all a £ M . Here j and k are arbitrary integers in the 
range 1, . . . ,p. 

Denote by S g h z C G m p a stabilizer group of p copies of 
the GHZ state | ^+ ) . As generators of S g h z let us choose p 
copies of the canonical GHZ generators (sec Eqs. H10lll[) ). 
Denote them as fj and f a pj, where j — 1, . . . ,p refers to 
different copies of Define a linear map T : S g i lz — > 

S such that its action on the generators is as follows: 

T (fj) = 9ji T ifaf3j) = g<xf3j, 

where j = 1, . . . ,p and a, (3 £ M . We would like to prove 
that T satisfies all conditions of Theorem [3| 

Using the fact that the vectors {g~j, g a k\, j,k = 
1, . . . ,p, a £ M are linearly independent, one can eas- 
ily show that T is a linear injection. Taking into ac- 
count that g~\ , . . . , g p span the subspace S en t that has no 
intersection with Si oc , we conclude that (T • S g h z )& = 
T ■ (S g hz)&- Condition (i) of Theorem [21 follows from 
the local commutation relations Eq. (|22|l . Thus one can 
extract at least p copies of the state l 1 ?^) from |<3>). 

Conversely, to prove the upper bound, assume that one 
can extract q copies of from |^) . Denote by S g h z the 
stabilizer group of Iq-^^) and let ft, . . . , f q be the canon- 
ical cr 1 -type stabilizers (see Eq. (fTUf) ^ - Let T : S g h z — > S 
be the linear injective map whose existence is guaranteed 
by Theorem |21 Clearly, a linear span of ft, ■ ■ ■ , fq has no 
intersection with co-local subspaces (S g h z )&- Acording 
to Theorem|21 vectors T(fi), . . . , T(f q ) are linearly inde- 
pendent and their linear span has no intersection with 
Si oc . This means that dim(S'/ oc ) < n — q. Therefore 
p > q, i.e., one can extract at most p copies of 1^^)- 

□ 
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V. BEYOND STABILIZER STATES 

In this section we argue that the functional A(\&) de- 
fined in Eq. for stabilizer states can be naturally 
extended to arbitrary multipartite states. Namely, it co- 
incides with a measure of multipartite correlations in- 
troduced by Linden, Popescu, and Wootters in |b|. A 
similar measure has been introduced also for multipar- 
tite probability distributions in 18]. It will allow us to 
show that A(\&) is equal to the number of GHZ states 
cxtractable from |$ ) by arbitrary local unitaries. 

Denote by D{B n ) a set of all mixed n-qubit states. 
Assume that n qubits are distributed between a set of 
parties M. Let \^f) E B n be an arbitrary M-party state. 
Define a set 

r(*) = { P E D{B n ) : Tr a (p) = lk a (|*)(*|) a E M], 

where Tr a is the partial trace. In other words, p E r(\&) 
iff p agrees with on any subset of \M\ — 1 parties. 
Following the paper 0] , define a functional 

n(*)= max S(p), (23) 
P er(*) 

where S(p) = — Trplog(p) is the von Neumann entropy. 
For bipartite states il(^f) coincides with the entangle- 
ment entropy (except for a factor 2) (see H3)- The main 
result of this section is 

Theorem 4 For any M-party stabilizer state with a 
stabilizer group S one has 

H(tf) = dim(S) - dim(5 Joc ). 

where S ioc = J2 a eM S &- 

The proof is based on the following observation. 

Lemma 2 Let be an M-party stabilizer state with a 
stabilizer group S . If S is generated by its co-local sub- 
groups, S = Sioc, then 

r(*) = |*)(*|. 

In other words a state |W) with S = Si oc is the unique 
(mixed) state compatible with partial traces of 
Proof: We shall use stabilizer equations a(f)\^>) = 
e(/)|#), f € S, uniquely specifying |*) (see Eq. Q). 
Take any state p E For any / E Sa one has 

Tr(o-(/)p) = (*|o-(/)|*> = e(/). 

Now consider a projector II = (l/2)(7 + e(/)<r(/)). 
Then Tr(Hp) = 1. This is possible only if the range of p 
coincides with the range of II. Thus, Hp = p, i.e., 

a(f)p = pa(f) = e(f) p for any / E S&, a E M. 

(24) 

Since S is generated by the subgroups S&, the equalities 
Eq. 124|) actually hold for any / E S. But equations 
a (f)P = e (/)Pi / € S, mean that p has support on the 
subspace stabilized by S, that is p = 



□ 

Corollary 1 Let |*) = ® $) 6e a collection of two 
M-party stabilizer states, such that |$) satisfies the con- 
ditions of Lemma\^ Then 

r(*) = r(*')® (25) 

To prove the corollary, take any state p E r(^) and apply 
Lemma|2to the partial trace of p over the first subsystem. 
Now we are ready to prove Theorem 
Proof: Let p = dim(S) — dim(S'; oc ) and m — \M\. Ob- 
viously, is invariant under local unitaries. As we 
know from Theorem|3| \^) is LCU-equivalent to a collec- 
tion of p M-party GHZ states, |p-\E'+ ) , and some M-party 
stabilizer state |$) satisfying the conditions of Lemma [2] 
Taking into account the factorization property Eq. 12511 . 
we obtain 

n(*) = n(p.*+). 

It remains to be shown that 

n(p-*+)=p. (26) 

First of all, consider a mixed version of the GHZ state, 

p = (1/2) |0® m )(0® m | + (1/2) |l® m )(l® m |. (27) 
It is clear that p E r(\&+). Thus 

n( P -*+)>s(p 9p )=pS(p)=p. (28) 

To get an upper bound, take any p E T Divide M 
into three non-empty subsets by an arbitrary way: M = 
Mi 1J M 2 U M 3 . Let pj and pjk be the reduced states of 
the subset Mj and Mj\_)Mu (with respect to p). The 
strong subadditivity inequality says that 

S( P ) + S( Pl ) < S( Pl2 ) + S( Pl3 ). 

But the condition p E r(p-^+) implies that all the states 
Pi j P12 , and pi3 are the mixed versions of the GHZ state 
(Eq. that is S(px) = S(pi 2 ) = S( Pl3 ) = p. Thus 

we get 5(p) < p. Combining it with the lower bound 
Eq. QSJ we get Eq. {g}. 

□ 

Corollary 2 Theorem gives £/ie Gffiv extraction yield 
from a stabilizer state for arbitrary local unitary opera- 
tors. 

Proof: Let p = A(4 f ) and q be the number of GHZ states 
extractable from |\I>) by local unitaries. Obviously, q > p. 
Since the functional 0(\P ) is LU-invariant, we infer from 
Eq. that fi(#) > Q(g • *+) = g. It follows from 
Theorem 0| that p > q. Thus p = q. 

□ 
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VI. TRIPARTITE STABILIZER STATES 

As a simple application of Theorem let us show that 
any tripartite stabilizer state is LCU- equivalent to a col- 
lection of states from the set E 3 = {|0), |*+), |*3 )}. Af- 
ter extraction of all local |0) states one can consider only 
states with full local ranks. 

Theorem 5 Let |f ) g S" be a stabilizer state with full 
local ranks shared by a set of parties M — {A, B,C}. 
Let S be a stabilizer group of |$) and Si oc — X^aeM 
Denote p = dim(S') — dim(jS; oc ) and d(a) = dira(Sa)- 
The state \^f) is LCU- equivalent to a collection of 

• (d{A) — p)/2 copies of \^ + ) shared by B and C , 

• (d(B) — p)/2 copies of \^ + ) shared by C and A, 

• (d(C) — p)/2 copies of \^ + ) shared by A and B, 

• p copies of the GHZ state I^J). 

Proof: As we already know from Theorem^ one can ex- 
tract p copies of | \&3~) from | vp) . This allows us to consider 
only the case p — 0. Equivalently, we can assume that 5* 
is equal to the sum of its co-local subgroups, S = Si oc . 
The full local ranks assumption means that the co-local 
subgroups do not overlap, i.e., S& f] = for a ^ ft. 
Thus S can be represented as a direct sum: 

S = S A ® S B ® S d . (29) 

Let us prove that |^) is LCU-equivalent to a collection 
of EPR states \^ + )- The proof consists of applying the 
same arguments to each pair of parties, so let us focus 
on the pair AB. 

Denote R = and consider a bilinear form 

n : R®R^ {0,1}, V (f,g)=u(f A ,g A ), 

for any f,g£R. We claim that r\ is a non-singular form. 
Indeed, suppose that 

r)(f,g) = for all g G R (30) 

and prove that / = 0. Indeed, Eq. I|30|> and decomposi- 
tion Eq. (|2*9")l imply that Ha) — for any h S S. 

We can rewrite this as u>(f, h) = for any h € S, where 
/ € G\ is chosen such that f& — It means that 
f € S x , that is f e Sf]G'X = S A = 0. Therefore, 
fA = and so / € Sb — 0. We conclude that / = and 
n is non-singular. 

Applying the Gram-Schmidt orthogonalization proce- 
dure, one can check that R must have an even dimension, 
dim(i?) = 21, and that there exists an orthonormal basis 
{SjJiJjH-,! °f -ft such that 

V{9j,9k) = 0, ri{9j,9k) = 0, v(g j: g k ) = 5 jk . (31) 

(For a proof see Dickson's theorem in [2(]], Chapter 15.) 



Denote by S epr C G a stabilizer group of I copies of 
the EPR state, \b^ + ). We consider \l-^ + ) as a tripartite 
state, such that C holds no qubits at all, and there are 
I EPR states shared by A and B. The 
independent generators {fji fj}j=i,...,i such that 

a(fj ) = <t? ® a) , a(fj ) = of <g> of , 

where j labels the copies of \^ + ), i.e., j = 1, . . . , I. Define 
a linear map T : S epr — > S such that 

T (fj) = 9j, T(f j )=g j , j = l,..., I. 

Obviously, T(S epr ) = R. We would like to check that T 
satisfies all the conditions of Theorem [21 Indeed, it is a 
linear injection because the images of the basis vectors 
of S epr are linearly independent. Condition (i) follows 
directly from Eq. i|31|) . Condition (i) holds because S epr 
has trivial co-local subgroup and so does R. Thus I copies 
of |\& + ) shared between A and B can be extracted from 
|*). 

Applying the same arguments to other pairs of par- 
ties, we conclude that AB, BC, and AC can extract 
d(C)/2, d(A)/2, and d{B)/2 EPR states respectively. 
The total number of qubits in the extracted EPR states 
is d(A) + d(B) + d(C) which coincides with dim(5) = n, 
see Eq. (|29|) . Thus no qubits are left after the extraction. 

To conclude the proof it is sufficient to note that ex- 
traction of a single GHZ state I* 3") reduces each of the 
dimensions dim(5' ( j) by one. 

□ 

A simple corollary of Theorem [3] is that two tripar- 
tite stabilizer states |^), \ ty') are LU-equivalent iff their 
decompositions into | V I ,+ ), l^jj"), and local |0) states coin- 
cide. Indeed, make use of the fact that a partial trace of 
|*3 ) over any qubit is a separable state. LU-equivalence 
of I*) and |*') implies that all partial traces of |^) and 
I*') are LU-equivalent; that is, the number of singlets 
\*f? + ) extractable by each pair of parties is the same for 
I*) and I*'). By counting the remaining dimensions we 
conclude that the numbers of GHZs l*^) extractable 
from I*) and I*') are the same. Thus LU-equivalence 
classes of tripartite stabilizer states are completely spec- 
ified by the numbers of |* + ) and l*^) in the decompo- 
sition of Theorem [5] 

Remark: One could prove Theorem [S] by making use 
of mixed stabilizer states. A mixed stabilizer state is a 
maximally mixed state encoded by some stabilizer code. 
Bipartite mixed stabilizer states can be classified using 
the techniques of the paper 0. It turns out that any 
bipartite mixed stabilizer state is LCU-equivalent to a 
collection of (i) local pure states; (ii) local maximally 
mixed states; (iii) EPR states; (iv) two-qubit mixed 
states (1/2)|0,0)(0,0| + (1/2)|1, 1|. Combining this 
fact with the purification theorem one immediately gets 
Theorem We refrain from pushing this approach fur- 
ther, because it is less symmetric than the one presented 
above. 
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VII. SATURATION OF MULTIPARTITE 
ENTANGLEMENT ENTROPY IN SPIN 
LATTICES 

As was mentioned in the introduction, characteriza- 
tion of multipartite entangled states might be useful 
for quantum cryptography and quantum game theory. 
Another natural area to look for applications is con- 
densed matter physics. It has been realized recently that 
ground states of d-dimensional spin lattices with spa- 
tially uniform short-range interactions are distinguished 
among all other states by obeying the entropic area law 
(see and references therein). According to this law, 
entanglement entropy of a block of spins with a spa- 
tial size L (thus containing about L d spins) scales as 
E(L) = b ■ L d ~ x + o(L d ~ 1 ), where & is a constant (critical 
systems are put aside). This law can be understood, at 
least very roughly, if one regards the ground state as a 
collection of short-range EPR states. Then E(L) is equal 
to the number of EPR states that stretch between the 
interior and exterior of the block. It is obviously propor- 
tional to the area of the boundary. From this standpoint 
(which is of course only a rude approximation) E(L) can 
be regarded as the maximal number of EPR states ex- 
tractable from the ground state by local unitaries. 

To get more insight into the structure of entanglement 
of the ground state, one can consider a partition of the 
lattice into several blocks of spins (which may or may not 
have junction points), and ask how many multipartite 
GHZ states can be extracted from the ground state by 
local unitaries. In this section we shall try to follow this 
program. 

Let us first put the problem more strictly. We shall 
focus on the two-dimensional case (a generalization to 
an arbitrary d is trivial). Suppose that the system un- 
der consideration consists of n qubits that are assigned 
to sites of a 2D regular lattice. Let |\I>o) G <S n be the 
ground state of the system. Consider a partition of the 
lattice into three segments A, B, and C which have a 
common junction point O, while pairwise intersections 
are one-dimensional rays incident to O (see Figure 1). 
The problem is to compute the quantity 

E 3 (n) = n(* ), 

defined by Eq. (J2HJ). As was argued in Section the 
quantity ^(^o) is a natural generalization of the GHZ 
extraction yield beyond stabilizer states. We are partic- 
ularly interested in the asymptotic behaviour of E^(n) 
when n goes to infinity (the thermodynamic limit). 

It is natural to expect that -££3(71) does not diverge as 
ri — > oo, since tripartite correlations have to be formed 
by interactions acting on spins near the junction point 
O. As long as the Hamiltonian of the system is short- 
ranged, there is only a finite number of such interactions. 
In other words, a natural conjecture is that 



A 



• «> • 




• » • 



B 



C 



swp E^(n) < oo. 



(32) 



FIG. 1: A junction point. 



This inequality says that E 3 (n) can be bounded from 
above by a constant that does not depend on the size of 
the system (this constant may depend upon the details 
of the system's Hamiltonian, however). The conjecture 
Eq. I|32|) . if it is true, would generalize the entanglement 
saturation phenomenon found for one-dimensional spin 
chains [3j5j to higher dimensions. 

In the rest of this section we prove Eq. (|32|l for a special 
case when (i) |^ ) is a stabilizer state; (ii) the stabilizer 
group of |\fo) nas a set of geometrically local generators. 
Well known examples of such states are the 2D cluster 
state 11 or the planar analogue of Kitaev's toric code 
state 0. 

Let |* ) e B n be a stabilizer state and S C G n be 
its stabilizer group. Let us say that S has an interaction 
length I, iff there exists a family of vectors fx, . . . , f p € S, 
such that (i) S is generated by fx, . . . , f p ; (ii) for any j, 
the support of the vector fj can be covered by a I x I rect- 
angular block. We do not assume that the fj are linearly 
independent, so in general p > n. However we assume 
that any vector u S G n appears in the list fx, - ■ - ,fp 
with multiplicity at most one (which, of course, is not a 
restriction at all). For example, one can easily check that 
the 2D cluster state and Kitaev's state have interaction 
length I = 3 and I = 2 respectively 

Consider a subgroup S' C S generated by vectors fj 
that have support on all three parties A, B, and C. Ob- 
viously, fj is supported on all three parties only if the 
I x I block representing the support of fj covers the junc- 
tion point O. Since there are only I 2 different blocks that 
cover O and each block can represent at most I 2 indepen- 
dent vectors fj, we conclude that 

dim(S') < I 4 . 

Consider now a subgroup Si oc C S generated by co-local 
subgroups of S (see Eq. JUJ). Since each fj belongs to 
at least one of the subgroups S' , Si oc , we infer that 

S = Sioc + S' and dim(S'; oc ) > dim(5) — dim(5 f/ ). 

Taking into account Theorem^ one gets 

fi(* ) = dimes') - dim(S /oc ) < dim(S') < I 4 

which gives us an upper bound on the number of GHZ 
states ^3") that can be extracted from l^o). This bound 
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FIG. 2: Graph Q used in the definition of \Q). 



does not depend upon n — only upon the interaction 
length I. Therefore Eq. Ij32|l is proved. 
Remark: Since the state \^q} is uniquely specified by 
stabilizer equations a(f) |^o) = l^o), / € S (see 
Eq. (0J), it can be regarded as the non-degenerate ground 
state of a Hamiltonian 

H = -j^e{f j )a{f j ). 

i=i 

This Hamiltonian is a sum of local interactions each of 
which affects the qubits inside some / x I block. 

VIII. FOUR-PARTY STABILIZER STATES 

As we learned from Section IVT1 there exists essentially 
one irreducible tripartite stabilizer state — the GHZ 
state I^J). What about four-party states? As the sim- 
plest example, consider a system of 4 qubits distributed 
between four parties. As was pointed out in |l9j . there 
exist only two irreducible 4 qubit stabilizer states: the 
GHZ state I^J) and a state 

|C 4 ) = (1/2)(|0000) + |0011) + |1100) - |1111)), 

such that \d) = A(o z )[2,3] |*+ <g> *+) (one can check 
that IC4) is LCU-equivalent to the cluster state of a four- 
qubit linear chain). 

Is it true that a set E A = {|0), |*+), |*|), |C 4 )} 

is an entanglement generating set for four-party stabilizer 
states? In this section we give an example of a state that 
is not LCU-equivalent to any collection of states from E4, 
thus answering this question in the negative. 

Consider a graph Q — (V, E) with 6 vertices shown 
on Figure 2. For each vertex u € V define a stabilizer 
f u S G 6 such that 

<r(fu)=< (g) <■ (33) 

(u,v)eE 

The vectors {f u }uev generate a self-dual subspace 5 C 
G e . Let \Q) 6 B 6 be the corresponding stabilizer state. 
(It is known as a graph state associated with the graph 
Q.) This state has the following curious property. 
Proposition: A partial trace of \Q) over any triple of 
qubits is maximally mixed: 

Tr uvw {\G){Q\) = \l, for any u^v^w. (34) 



For a proof see [2l| . 

Suppose now that \Q) is shared by a set of parties M — 
{A, B, C, D} such that 

A = {1,4}, 5 = {3,6}, C = {2}, D = {5}. 



Lemma 3 If \Q) is shared by the set of parties M = 
{A, -B,C, D} as above, it is irreducible, i.e., no stabilizer 
state can be extracted from \Q) . 

(Here we talk about extraction in the sense of Definition^] 
and ignore the trivial possibility of extracting \Q) from 
itself.) 

Proof: We shall first show that neither of the states 
|4' + ), 1^3) can be extracted from \Q). 

(a) ^3") extraction: Suppose one can extract one copy 
of 1*3 ) which is shared by a subset of parties M' C M, 
\M'\ = 3. Obviously, M' contains at least one of A, B, 
and at least one of C, D. By the symmetry, assume 
that A € M' and D E M' . Then the reduced state of the 
qubits 1, 4, 5 has a rank at most 4, contradicting Eq. 13411 . 

(b) \^ + ) extraction: Obviously, \^ + ) cannot be shared 
by C and D (the reduced state of any pair of qubits is 
maximally mixed). Thus there are only two possibilities: 
(i) |*+) is shared by one of {A,B} and one of {C,D}. 
Then one of the triple of qubits AC, AD, BC, BD has a 
rank at most 2, contradicting Eq. (|34|l . (ii) \^ + ) is shared 
by A and B. Then there must be two vectors f,f£ S 
such that 

fc = f D = fc = fD = 0, (35) 



u{f A J A ) = u{f B J B ) = l. (36) 

Taking into account the explicit form of the stabilizer 
generators Eq. (|33|l . one can check that the only non- 
trivial stabilizer elements having a support on A and B 
are the following 

CTf(g)cr|(g)cr|(g)cr|, o\ <g> erf <g> <t| <g> of , of ® a% ® <g> 0% . 

(All identity factors are suppressed.) Any pair of them 
commute locally on A and B. Thus the equations 
Eqs. H35I36|I have no solutions and we get a contradic- 
tion. 

Extraction of a four-party state from \Q) is impossible, 
since it leaves a bipartite (or a local pure state) which 
would also be extractable from \Q). As we already know, 
this would lead to a contradiction. 

□ 

This observation means that we must add the state \Q) 
to the entanglement generating set E4. It raises a ques- 
tion: Is there a finite EGS for four-party stabilizer states? 
(Note that we allow an arbitrary number of qubits per 
party, so the total number of stabilizer states is infinite.) 
To the authors' best knowledge, the answer is unknown. 
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A closely related problem is to find LCU-equivalence 
classes of bipartite unitary operators from the Clifford 
group (it suffices to take two copies of a maximally en- 
tangled state and apply a unitary operator to one half of 
each state, see j2^] for more details). 

Another open question is the relation between LU- 
equivalence and LCU-equivalence of stabilizer states. To 
the authors' best knowledge, there are no known ex- 
amples of LU-equivalent stabilizer states which are not 
LCU-equivalent. On the other hand, it was shown by 
Van den Nest, Dehaene, and De Moor at [Hj], extending 



work by Rains [23j , that for a pretty large class of stabi- 
lizer states, including the states specified by GF(4) linear 
codes, LCU-equivalence coincides with LU-equivalence 
(this statement applies only to one-qubit-per-party par- 
titions). 
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IX. APPENDIX 

The goal of this section is to prove Lemma ^ We start 
by stating one more lemma. 



Lemma 4 Let fi,. ■ ■ , f p and /{, 

of vectors in G n satisfying the following conditions 



fp be two families 



cj(f j ,f k )=uj(f'f' k ) for all l<j,k<p; (37) 



Y^-'-j/j " € ( 38 ) 

3=1 i=i 

Here x\, . . . , x p G {0, 1} are arbitrary binary coefficients. 
Then there exists a symplectic operator u G Sp2{n) such 
that 

fj= u Uj) for all j = l,...,p. 

Proof: Let us call a basis e\, e\, . . . , e n , e n of the space 
G n canonical iff the following relations hold: 

ui(ej,e k ) = 0, L>(e~j,e k )=0, oj(ej, e k ) = S jk . (39) 
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One can extend the family f\ , . . . , f p to a canonical basis 
{ej, Bj} using the Gram-Schmidt orthogonalization algo- 
rithm. After that one can write 

n 

fj ■= ^F ]k e k + F jk e k , j = l,...,p, 
fc=i 

where F and F are some binary p x n matrices. It is a 
property of the Gram-Schmidt algorithm that the coeffi- 
cients Fjk and Fj k depend only upon the inner products 
Eq. and upon the set of linear dependencies Eq. (J3SJ. 
Thus if we apply the same algorithm in parallel to the 
family f [,..., f', we shall end up with a canonical basis 
{e[,e[, . . .,e' n ,e' n } such that 

n 

/; x>>* ■ F lS y,. 3 = 1,..., P . 

fe=i 

The symplectic group Sp2 {n) acts transitively on the set 
of canonical bases. Thus 

e 'j = u(ej), e'j = u(ej), j = 1, . . . n, 

for some u £ Sp2(n). This implies that /j = u(fj) for all 
j = 1,... ,p. 

□ 

Now we are ready to prove Lemma ^ The non-trivial 
part is to prove that statement 1 follows from state- 
ment 2. Choose an arbitrary basis fx, . . . , f p of the sub- 
space S. Denote /j = T(f J ) £ S' . The condition that 



T is an invertible map implies that /{,..., f is a basis 
of 5". For each a £ M, consider projections f a j = (fj) a 
and f' a j = {fj)a- The condition (2-i) is equivalent to 

u(f aj J a k)=u(fLjJLk) for all a£M (40) 

and any j, k in the range 1, . . . ,p. 

In addition, we have the following chain of impli- 
cations: Yfj=l X jfaj = iff J2 P j=i x jfj e s & iff 

t(EU x ih) e s '& ifr x if'a = °- The second 

implication is the condition (2-ii) of the lemma, while all 
others follow from the definition of the co-local subspace. 
Summarizing, we have 

p p 

Y.- r iir X •'•'/,', (41) 

Now, for each a £ M, let us apply Lemma^Jto the fam- 
ilies of vectors f a i,...,f ap £ G™° and f' al , . . . , f' ap £ 
G™ Q . The conditions of Lemma 0] are equivalent to 
Eqs. H4UI41fl . Thus there exist operators u a £ Sp2(n a ) 
such that 

faj =u M<xj), a£M, j = l,..., p. 
This means that 

/;= ( 0J (/,), ./ i ,>. 

\aEM ) 

This is equivalent to statement 1 of Lemma ^ 



